Your company has a BigQuery dataset named "Master" that keeps information about employee travel and expenses. This information is organized by employee department. That means employees should only be able to view information for their department. You want to apply a security framework to enforce this requirement with the minimum number of steps.
What should you do?

• A.Create a dataset named Master dataset. Create a separate table for each department in the Master dataset. Give employees access to the specific table for their department.
• B.Create a separate dataset for each department. Create a data pipeline for each department to copy appropriate information from the Master dataset to the specific dataset for the department. Give employees the permission to this department-specific dataset.
• C.Create a separate dataset for each department. Create a view with an appropriate WHERE clause to select records from a particular dataset for the specific department. Authorize this view to access records from your Master dataset. Give employees the permission to this department-specific dataset.
• D.Create a dataset named Master dataset. Create a separate view for each department in the Master dataset. Give employees access to the specific view for their department.

Comment: *

Name: *

Email: *

Verification: *

Your application takes an input from a user and publishes it to the user's contacts. This input is stored in a table in Cloud Spanner. Your application is more sensitive to latency and less sensitive to consistency.
How should you perform reads from Cloud Spanner for this application?

• A.Perform Read-Only transactions.
• B.Perform stale reads using single-read methods.
• C.Perform strong reads using single-read methods.
• D.Perform stale reads using read-write transactions.

Comment: *

Name: *

Email: *

Verification: *

You have deployed an HTTP(s) Load Balancer with the gcloud commands shown below.

Health checks to port 80 on the Compute Engine virtual machine instance are failing and no traffic is sent to your instances. You want to resolve the problem.
Which commands should you run?

• A.gcloud compute instances add-access-config ${NAME}-backend-instance-1
• B.gcloud compute instances add-tags ${NAME}-backend-instance-1 --tags http-server
• C.gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS
• D.gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --destination-ranges 130.211.0.0/22,35.191.0.0/16 --direction EGRESS

Comment: *

Name: *

Email: *

Verification: *

You are deploying your application on a Compute Engine instance that communicates with Cloud SQL. You will use Cloud SQL Proxy to allow your application to communicate to the database using the service account associated with the application's instance. You want to follow the Google-recommended best practice of providing minimum access for the role assigned to the service account. What should you do?

• A.Assign the Project Owner role.
• B.Assign the Cloud SQL Client role.
• C.Assign the Cloud SQL Editor role.
• D.Assign the Project Editor role.

Comment: *

Name: *

Email: *

Verification: *

You are planning to migrate a MySQL database to the managed Cloud SQL database for Google Cloud. You have Compute Engine virtual machine instances that will connect with this Cloud SQL instance. You do not want to whitelist IPs for the Compute Engine instances to be able to access Cloud SQL.
What should you do?

• A.Enable private IP for the Cloud SQL instance.
• B.Whitelist a project to access Cloud SQL, and add Compute Engine instances in the whitelisted project.
• C.Create a role in Cloud SQL that allows access to the database from external instances, and assign the Compute Engine instances to that role.
• D.Create a CloudSQL instance on one project. Create Compute engine instances in a different project.
  Create a VPN between these two projects to allow internal access to CloudSQL.

Comment: *

Name: *

Email: *

Verification: *